@storyshelf/core 0.1.2 → 0.3.1

package/dist/routers/auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth.mjs","names":[],"sources":["../../src/routers/auth.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { SESSION_COOKIE, type AuthAdapter, type AuthUser } from \"../adapters/auth.ts\";\nimport { renderLoginPage } from \"../pages/login.tsx\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\nconst OAUTH_STATE_COOKIE = \"storyshelf_oauth_state\";\nconst SESSION_TTL_SECONDS = 7 * 24 * 60 * 60;\n\nconst SHARED_USER: AuthUser = { id: \"shared\", email: \"admin@local\", name: \"Admin\", role: \"admin\" };\n\nfunction sessionCookieHeader(token: string): string {\n  return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL_SECONDS}`;\n}\n\nfunction clearSessionCookieHeader(): string {\n  return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;\n}\n\ntype PasswordAuth = AuthAdapter & { login(password: string, user: AuthUser): Promise<string> };\ntype SsoAuth = AuthAdapter & { loginUrl(state: string): string };\n\nfunction hasPasswordLogin(auth: AuthAdapter): auth is PasswordAuth {\n  return \"login\" in auth;\n}\n\nfunction hasSso(auth: AuthAdapter): auth is SsoAuth {\n  return \"loginUrl\" in auth;\n}\n\nfunction buildSsoUrl(c: Context, auth: SsoAuth): string {\n  const state = randomToken(\"shelf_\").value;\n  c.header(\"set-cookie\", `${OAUTH_STATE_COOKIE}=${state}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600`);\n  return auth.loginUrl(state);\n}\n\nexport function registerAuth(app: ShelfApp, auth: AuthAdapter): void {\n  app.get(\"/auth/login\", async (c) => {\n    if (hasSso(auth) && !hasPasswordLogin(auth)) {\n      return c.redirect(buildSsoUrl(c, auth));\n    }\n    const ssoUrl = hasSso(auth) ? buildSsoUrl(c, auth) : undefined;\n    return c.html(await renderLoginPage({ ssoUrl }));\n  });\n\n  app.post(\"/auth/login\", async (c) => {\n    if (!hasPasswordLogin(auth)) {\n      throw new HTTPException(404, { message: \"Password login is not configured\" });\n    }\n    const form = await c.req.formData();\n    const raw = form.get(\"password\");\n    const password = typeof raw === \"string\" ? raw : \"\";\n    try {\n      const token = await auth.login(password, SHARED_USER);\n      c.header(\"set-cookie\", sessionCookieHeader(token));\n      return hxRedirect(c, \"/\");\n    } catch {\n      return c.html(await renderLoginPage({ error: \"Invalid password\" }), 401);\n    }\n  });\n\n  app.get(\"/auth/callback\", async (c) => {\n    if (!auth.handleCallback) {\n      return c.notFound();\n    }\n    const code = c.req.query(\"code\") ?? \"\";\n    const state = c.req.query(\"state\") ?? \"\";\n    if (!code || !state) {\n      throw new HTTPException(400, { message: \"Missing code or state\" });\n    }\n    const user = await auth.handleCallback({ provider: \"oidc\", code, state });\n    if (!user) {\n      return c.html(await renderLoginPage({ error: \"SSO sign in failed\" }), 401);\n    }\n    const token = await auth.createSession(user);\n    c.header(\"set-cookie\", sessionCookieHeader(token));\n    return c.redirect(\"/\");\n  });\n\n  app.post(\"/auth/logout\", async (c) => {\n    await auth.destroySession(\"\");\n    c.header(\"set-cookie\", clearSessionCookieHeader());\n    return hxRedirect(c, \"/auth/login\");\n  });\n}"],"mappings":";;;;;;;;;AASA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,cAAwB;CAAE,IAAI;CAAU,OAAO;CAAe,MAAM;CAAS,MAAM;AAAQ;AAEjG,SAAS,oBAAoB,OAAuB;CAClD,OAAO,GAAG,eAAe,GAAG,MAAM,4CAA4C;AAChF;AAEA,SAAS,2BAAmC;CAC1C,OAAO,GAAG,eAAe;AAC3B;AAKA,SAAS,iBAAiB,MAAyC;CACjE,OAAO,WAAW;AACpB;AAEA,SAAS,OAAO,MAAoC;CAClD,OAAO,cAAc;AACvB;AAEA,SAAS,YAAY,GAAY,MAAuB;CACtD,MAAM,QAAQ,YAAY,QAAQ,CAAC,CAAC;CACpC,EAAE,OAAO,cAAc,GAAG,mBAAmB,GAAG,MAAM,8CAA8C;CACpG,OAAO,KAAK,SAAS,KAAK;AAC5B;AAEA,SAAgB,aAAa,KAAe,MAAyB;CACnE,IAAI,IAAI,eAAe,OAAO,MAAM;EAClC,IAAI,OAAO,IAAI,KAAK,CAAC,iBAAiB,IAAI,GACxC,OAAO,EAAE,SAAS,YAAY,GAAG,IAAI,CAAC;EAExC,MAAM,SAAS,OAAO,IAAI,IAAI,YAAY,GAAG,IAAI,IAAI,KAAA;EACrD,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC;CACjD,CAAC;CAED,IAAI,KAAK,eAAe,OAAO,MAAM;EACnC,IAAI,CAAC,iBAAiB,IAAI,GACxB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,mCAAmC,CAAC;EAG9E,MAAM,OAAM,MADO,EAAE,IAAI,SAAS,EAAA,CACjB,IAAI,UAAU;EAC/B,MAAM,WAAW,OAAO,QAAQ,WAAW,MAAM;EACjD,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,MAAM,UAAU,WAAW;GACpD,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;GACjD,OAAO,WAAW,GAAG,GAAG;EAC1B,QAAQ;GACN,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,mBAAmB,CAAC,GAAG,GAAG;EACzE;CACF,CAAC;CAED,IAAI,IAAI,kBAAkB,OAAO,MAAM;EACrC,IAAI,CAAC,KAAK,gBACR,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;EACpC,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;EACtC,IAAI,CAAC,QAAQ,CAAC,OACZ,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,wBAAwB,CAAC;EAEnE,MAAM,OAAO,MAAM,KAAK,eAAe;GAAE,UAAU;GAAQ;GAAM;EAAM,CAAC;EACxE,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,qBAAqB,CAAC,GAAG,GAAG;EAE3E,MAAM,QAAQ,MAAM,KAAK,cAAc,IAAI;EAC3C,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;EACjD,OAAO,EAAE,SAAS,GAAG;CACvB,CAAC;CAED,IAAI,KAAK,gBAAgB,OAAO,MAAM;EACpC,MAAM,KAAK,eAAe,EAAE;EAC5B,EAAE,OAAO,cAAc,yBAAyB,CAAC;EACjD,OAAO,WAAW,GAAG,aAAa;CACpC,CAAC;AACH"}
+{"version":3,"file":"auth.mjs","names":[],"sources":["../../src/routers/auth.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { SESSION_COOKIE, type AuthAdapter, type AuthUser } from \"../adapters/auth.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { renderLoginPage } from \"../pages/login.tsx\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\nconst OAUTH_STATE_COOKIE = \"storyshelf_oauth_state\";\nconst SESSION_TTL_SECONDS = 7 * 24 * 60 * 60;\n\nconst SHARED_USER: AuthUser = { id: \"shared\", email: \"admin@local\", name: \"Admin\", role: \"admin\" };\n\nfunction sessionCookieHeader(token: string): string {\n  return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL_SECONDS}`;\n}\n\nfunction clearSessionCookieHeader(): string {\n  return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;\n}\n\ntype PasswordAuth = AuthAdapter & { login(password: string, user: AuthUser): Promise<string> };\ntype SsoAuth = AuthAdapter & { loginUrl(state: string): string };\n\nfunction hasPasswordLogin(auth: AuthAdapter): auth is PasswordAuth {\n  return \"login\" in auth;\n}\n\nfunction hasSso(auth: AuthAdapter): auth is SsoAuth {\n  return \"loginUrl\" in auth;\n}\n\nfunction buildSsoUrl(c: Context, auth: SsoAuth): string {\n  const state = randomToken(\"shelf_\").value;\n  c.header(\n    \"set-cookie\",\n    `${OAUTH_STATE_COOKIE}=${state}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600`,\n  );\n  return auth.loginUrl(state);\n}\n\n/** Register the password and SSO login, callback, and logout routes. */\nexport function registerAuth(app: ShelfApp, auth: AuthAdapter): void {\n  app.get(\"/auth/login\", async (c) => {\n    if (hasSso(auth) && !hasPasswordLogin(auth)) {\n      return c.redirect(buildSsoUrl(c, auth));\n    }\n    const ssoUrl = hasSso(auth) ? buildSsoUrl(c, auth) : undefined;\n    return c.html(await renderLoginPage({ ssoUrl }));\n  });\n\n  app.post(\"/auth/login\", async (c) => {\n    if (!hasPasswordLogin(auth)) {\n      throw new HTTPException(404, { message: \"Password login is not configured\" });\n    }\n    const form = await c.req.formData();\n    const raw = form.get(\"password\");\n    const password = typeof raw === \"string\" ? raw : \"\";\n    try {\n      const token = await auth.login(password, SHARED_USER);\n      c.header(\"set-cookie\", sessionCookieHeader(token));\n      return hxRedirect(c, \"/\");\n    } catch {\n      return c.html(await renderLoginPage({ error: \"Invalid password\" }), 401);\n    }\n  });\n\n  app.get(\"/auth/callback\", async (c) => {\n    if (!auth.handleCallback) {\n      return c.notFound();\n    }\n    const code = c.req.query(\"code\") ?? \"\";\n    const state = c.req.query(\"state\") ?? \"\";\n    if (!code || !state) {\n      throw new HTTPException(400, { message: \"Missing code or state\" });\n    }\n    const user = await auth.handleCallback({ provider: \"oidc\", code, state });\n    if (!user) {\n      return c.html(await renderLoginPage({ error: \"SSO sign in failed\" }), 401);\n    }\n    const token = await auth.createSession(user);\n    c.header(\"set-cookie\", sessionCookieHeader(token));\n    return c.redirect(\"/\");\n  });\n\n  app.post(\"/auth/logout\", async (c) => {\n    await auth.destroySession(\"\");\n    c.header(\"set-cookie\", clearSessionCookieHeader());\n    return hxRedirect(c, \"/auth/login\");\n  });\n}\n"],"mappings":";;;;;;;;;AAQA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,cAAwB;CAAE,IAAI;CAAU,OAAO;CAAe,MAAM;CAAS,MAAM;AAAQ;AAEjG,SAAS,oBAAoB,OAAuB;CAClD,OAAO,GAAG,eAAe,GAAG,MAAM,4CAA4C;AAChF;AAEA,SAAS,2BAAmC;CAC1C,OAAO,GAAG,eAAe;AAC3B;AAKA,SAAS,iBAAiB,MAAyC;CACjE,OAAO,WAAW;AACpB;AAEA,SAAS,OAAO,MAAoC;CAClD,OAAO,cAAc;AACvB;AAEA,SAAS,YAAY,GAAY,MAAuB;CACtD,MAAM,QAAQ,YAAY,QAAQ,CAAC,CAAC;CACpC,EAAE,OACA,cACA,GAAG,mBAAmB,GAAG,MAAM,8CACjC;CACA,OAAO,KAAK,SAAS,KAAK;AAC5B;;AAGA,SAAgB,aAAa,KAAe,MAAyB;CACnE,IAAI,IAAI,eAAe,OAAO,MAAM;EAClC,IAAI,OAAO,IAAI,KAAK,CAAC,iBAAiB,IAAI,GACxC,OAAO,EAAE,SAAS,YAAY,GAAG,IAAI,CAAC;EAExC,MAAM,SAAS,OAAO,IAAI,IAAI,YAAY,GAAG,IAAI,IAAI,KAAA;EACrD,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC;CACjD,CAAC;CAED,IAAI,KAAK,eAAe,OAAO,MAAM;EACnC,IAAI,CAAC,iBAAiB,IAAI,GACxB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,mCAAmC,CAAC;EAG9E,MAAM,OAAM,MADO,EAAE,IAAI,SAAS,EAAA,CACjB,IAAI,UAAU;EAC/B,MAAM,WAAW,OAAO,QAAQ,WAAW,MAAM;EACjD,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,MAAM,UAAU,WAAW;GACpD,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;GACjD,OAAO,WAAW,GAAG,GAAG;EAC1B,QAAQ;GACN,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,mBAAmB,CAAC,GAAG,GAAG;EACzE;CACF,CAAC;CAED,IAAI,IAAI,kBAAkB,OAAO,MAAM;EACrC,IAAI,CAAC,KAAK,gBACR,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;EACpC,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;EACtC,IAAI,CAAC,QAAQ,CAAC,OACZ,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,wBAAwB,CAAC;EAEnE,MAAM,OAAO,MAAM,KAAK,eAAe;GAAE,UAAU;GAAQ;GAAM;EAAM,CAAC;EACxE,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,qBAAqB,CAAC,GAAG,GAAG;EAE3E,MAAM,QAAQ,MAAM,KAAK,cAAc,IAAI;EAC3C,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;EACjD,OAAO,EAAE,SAAS,GAAG;CACvB,CAAC;CAED,IAAI,KAAK,gBAAgB,OAAO,MAAM;EACpC,MAAM,KAAK,eAAe,EAAE;EAC5B,EAAE,OAAO,cAAc,yBAAyB,CAAC;EACjD,OAAO,WAAW,GAAG,aAAa;CACpC,CAAC;AACH"}

package/dist/routers/builds.handlers.mjs

@@ -3,55 +3,152 @@ import "node:url";
 import.meta.url;
 import { BuildModel } from "../models/build.mjs";
 import { ProjectModel } from "../models/project.mjs";
-import { BUILD_STATUSES } from "../types.mjs";
-import { getStore } from "../store.mjs";
-import { notFound } from "./helpers.mjs";
 import { emitWebhookEvent } from "../adapters/webhook-events.mjs";
 import { BaselineModel } from "../models/baseline.mjs";
 import { SnapshotModel } from "../models/snapshot.mjs";
+import { extractStorybookToScratch, persistStorybookStatics } from "../capture/statics.mjs";
+import { getStore } from "../store.mjs";
+import { BUILD_STATUSES } from "../types.mjs";
+import { LabelModel } from "../models/label.mjs";
+import { notFound } from "./helpers.mjs";
 import { z } from "@hono/zod-openapi";
+import { HTTPException } from "hono/http-exception";
+import { Readable, Transform } from "node:stream";
 //#region src/routers/builds.handlers.ts
+/** Roles permitted to view builds, snapshots, and comments. */
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
 	"approver",
 	"admin"
 ];
+/** Roles permitted to upload builds and write comments. */
 const DEVELOPER_ROLES = [
 	"developer",
 	"approver",
 	"admin"
 ];
+/** Roles permitted to approve or reject snapshots and delete builds. */
 const APPROVER_ROLES = ["approver", "admin"];
-const buildUploadSchema = z.object({
-	gitSha: z.string(),
-	gitBranch: z.string(),
+/** JSON input schema for creating a build before streaming its bundle. */
+const buildCreateJsonSchema = z.object({
+	gitSha: z.string().min(1),
+	gitBranch: z.string().min(1),
 	authorEmail: z.string().optional(),
 	authorName: z.string().optional(),
 	message: z.string().optional(),
-	zip: z.instanceof(File).openapi({
-		type: "string",
-		format: "binary"
-	}).optional()
-}).openapi("BuildUpload");
+	labels: z.array(z.object({
+		key: z.string().min(1),
+		value: z.string()
+	})).optional()
+}).openapi("BuildCreate");
+async function attachLabels(db, projectId, buildId, labels) {
+	const models = new LabelModel(db);
+	for (const { key, value } of labels) {
+		if (!await models.getType(projectId, key)) await models.createType(projectId, {
+			key,
+			name: key
+		});
+		await models.attach(projectId, buildId, key, value);
+	}
+}
+/**
+* Create a build record with labels and the `build:created` webhook.
+* Shared by the build-creation route.
+*/
+async function createBuildRecord(project, meta) {
+	const { db, config } = getStore();
+	if (!meta.gitSha || !meta.gitBranch) throw new HTTPException(400, { message: "gitSha and gitBranch are required" });
+	const build = await new BuildModel(db).create(project.id, {
+		gitSha: meta.gitSha,
+		gitBranch: meta.gitBranch,
+		isDefault: meta.gitBranch === project.gitDefaultBranch,
+		authorEmail: meta.authorEmail,
+		authorName: meta.authorName,
+		message: meta.message
+	});
+	if (meta.labels && meta.labels.length > 0) await attachLabels(db, project.id, build.id, meta.labels);
+	await emitWebhookEvent(db, project.id, "build:created", {
+		buildId: build.id,
+		gitSha: meta.gitSha,
+		gitBranch: meta.gitBranch,
+		authorEmail: meta.authorEmail,
+		authorName: meta.authorName,
+		message: meta.message
+	}, config.secret);
+	return build;
+}
+/**
+* Stream a raw request body into storage with a byte cap.
+* Throws 400 for a missing body, 413 once `maxBytes` is exceeded.
+*/
+async function storeUploadStream(storage, path, body, maxBytes) {
+	if (!body) throw new HTTPException(400, { message: "Missing request body" });
+	let seen = 0;
+	const limiter = new Transform({ transform(chunk, _encoding, callback) {
+		seen += chunk.length;
+		if (seen > maxBytes) callback(/* @__PURE__ */ new Error(`Upload exceeds ${maxBytes} byte limit`));
+		else callback(null, chunk);
+	} });
+	try {
+		const nodeBody = Readable.fromWeb(body);
+		await storage.writeStream(path, nodeBody.pipe(limiter));
+	} catch (error) {
+		if (seen > maxBytes) throw new HTTPException(413, { message: "Upload exceeds size limit" });
+		throw error;
+	}
+}
+/** Parse a Content-Length header value into bytes, or undefined when unknown. */
+function parseContentLength(value) {
+	if (!value) return;
+	const parsed = Math.trunc(Number(value));
+	return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
+}
+/**
+* Best-effort inline statics extraction for small uploads (see
+* `maxInlineUnzipSize`). Never throws: failures are logged and the capture
+* job backfills the same keys idempotently.
+*/
+async function persistInlineStatics(storage, scratchDir, maxInlineBytes, contentLength, projectId, buildId, logger) {
+	if (!scratchDir || !maxInlineBytes) return;
+	const size = parseContentLength(contentLength);
+	if (size === void 0 || size > maxInlineBytes) return;
+	try {
+		const extractedDir = await extractStorybookToScratch(storage, scratchDir, projectId, buildId);
+		await persistStorybookStatics(storage, extractedDir, projectId, buildId);
+		logger.info({
+			buildId,
+			size
+		}, "upload statics persisted inline");
+	} catch (error) {
+		logger.error({
+			err: error,
+			buildId
+		}, "inline statics persist failed; capture will backfill");
+	}
+}
+/** Query filters accepted by the build list endpoint. */
 const buildListQuery = z.object({
 	status: z.enum(BUILD_STATUSES).optional(),
 	branch: z.string().optional(),
 	labelKey: z.string().optional(),
 	labelValue: z.string().optional()
 });
+/** Fetch a build scoped to its project, throwing 404 when it does not belong. */
 async function buildForProject(projectId, buildId) {
 	const build = await new BuildModel(getStore().db).get(buildId);
 	if (!build || build.projectId !== projectId) notFound("Build not found");
 	return build;
 }
+/** Fetch a snapshot scoped to its build, throwing 404 when it does not belong. */
 async function snapshotForBuild(build, snapshotId) {
 	const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);
 	if (!snapshot || snapshot.buildId !== build.id) notFound("Snapshot not found");
 	return snapshot;
 }
+/** Recompute a build's counts and roll its status up from its snapshots. */
 async function refreshBuild(buildId) {
-	const { db } = getStore();
+	const { db, config } = getStore();
 	await new BuildModel(db).updateCounts(buildId);
 	const snapshots = await new SnapshotModel(db).listByBuild(buildId);
 	const unresolved = snapshots.some((s) => s.status === "new" || s.status === "changed");
@@ -65,11 +162,12 @@ async function refreshBuild(buildId) {
 			buildId,
 			status,
 			snapshotCount: snapshots.length
-		});
+		}, config.secret);
 	}
 }
+/** Approve a snapshot, promote its screenshot to baseline, and refresh the build. */
 async function approveSnapshot(snapshotId, userId) {
-	const { db } = getStore();
+	const { db, config } = getStore();
 	const snapshots = new SnapshotModel(db);
 	const snapshot = await snapshots.get(snapshotId);
 	if (!snapshot) notFound("Snapshot not found");
@@ -77,13 +175,10 @@ async function approveSnapshot(snapshotId, userId) {
 	const build = await new BuildModel(db).get(snapshot.buildId);
 	if (!project || !build) notFound("Project or build not found");
 	await snapshots.review(snapshotId, "approved", userId);
-	await new BaselineModel(db, getStore().storage).upsert(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, snapshot.id, snapshot.screenshotPath);
+	await new BaselineModel(db, getStore().storage, config.secret).upsert(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, snapshot.id, snapshot.screenshotPath);
 	await refreshBuild(build.id);
 }
-function asString(value) {
-	return typeof value === "string" ? value : void 0;
-}
 //#endregion
-export { APPROVER_ROLES, DEVELOPER_ROLES, VIEW_ROLES, approveSnapshot, asString, buildForProject, buildListQuery, buildUploadSchema, refreshBuild, snapshotForBuild };
+export { APPROVER_ROLES, DEVELOPER_ROLES, VIEW_ROLES, approveSnapshot, buildCreateJsonSchema, buildForProject, buildListQuery, createBuildRecord, persistInlineStatics, refreshBuild, snapshotForBuild, storeUploadStream };
 
 //# sourceMappingURL=builds.handlers.mjs.map

package/dist/routers/builds.handlers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"builds.handlers.mjs","names":[],"sources":["../../src/routers/builds.handlers.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport { BaselineModel } from \"../models/baseline.ts\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport { emitWebhookEvent } from \"../adapters/webhook-events.ts\";\nimport { getStore } from \"../store.ts\";\nimport { type ProjectRole, BUILD_STATUSES } from \"../types.ts\";\nimport { notFound } from \"./helpers.ts\";\n\nexport const VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\nexport const DEVELOPER_ROLES: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\nexport const APPROVER_ROLES: readonly ProjectRole[] = [\"approver\", \"admin\"];\n\nexport const buildUploadSchema = z.object({\n  gitSha: z.string(),\n  gitBranch: z.string(),\n  authorEmail: z.string().optional(),\n  authorName: z.string().optional(),\n  message: z.string().optional(),\n  zip: z.instanceof(File).openapi({ type: \"string\", format: \"binary\" }).optional(),\n}).openapi(\"BuildUpload\");\n\nexport const buildListQuery = z.object({\n  status: z.enum(BUILD_STATUSES).optional(),\n  branch: z.string().optional(),\n  labelKey: z.string().optional(),\n  labelValue: z.string().optional(),\n});\n\nexport async function buildForProject(projectId: string, buildId: string): Promise<import(\"../models/build.ts\").Build> {\n  const build = await new BuildModel(getStore().db).get(buildId);\n  if (!build || build.projectId !== projectId) {\n    notFound(\"Build not found\");\n  }\n  return build;\n}\n\nexport async function snapshotForBuild(build: { id: string }, snapshotId: string): Promise<import(\"../models/snapshot.ts\").Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== build.id) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n\nexport async function refreshBuild(buildId: string): Promise<void> {\n  const {db} = getStore();\n  await new BuildModel(db).updateCounts(buildId);\n  const snapshots = await new SnapshotModel(db).listByBuild(buildId);\n  const unresolved = snapshots.some((s) => s.status === \"new\" || s.status === \"changed\");\n  let status: \"reviewing\" | \"rejected\" | \"approved\";\n  if (unresolved) {\n    status = \"reviewing\";\n  } else {\n    const rejected = snapshots.some((s) => s.status === \"rejected\");\n    status = rejected ? \"rejected\" : \"approved\";\n  }\n  const build = await new BuildModel(db).get(buildId);\n  if (build) {\n    await new BuildModel(db).setStatus(buildId, status);\n    await emitWebhookEvent(db, build.projectId, `build:${status}`, {\n      buildId,\n      status,\n      snapshotCount: snapshots.length,\n    });\n  }\n}\n\nexport async function approveSnapshot(snapshotId: string, userId: string): Promise<void> {\n  const {db} = getStore();\n  const snapshots = new SnapshotModel(db);\n  const snapshot = await snapshots.get(snapshotId);\n  if (!snapshot) {\n    notFound(\"Snapshot not found\");\n  }\n  const project = await new ProjectModel(db).get(snapshot.projectId);\n  const build = await new BuildModel(db).get(snapshot.buildId);\n  if (!project || !build) {\n    notFound(\"Project or build not found\");\n  }\n  await snapshots.review(snapshotId, \"approved\", userId);\n  const baselines = new BaselineModel(db, getStore().storage);\n  await baselines.upsert(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, snapshot.id, snapshot.screenshotPath);\n  await refreshBuild(build.id);\n}\n\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value : undefined;\n}\n\nexport { asString };"],"mappings":";;;;;;;;;;;;;AAWA,MAAa,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAC7F,MAAa,kBAA0C;CAAC;CAAa;CAAY;AAAO;AACxF,MAAa,iBAAyC,CAAC,YAAY,OAAO;AAE1E,MAAa,oBAAoB,EAAE,OAAO;CACxC,QAAQ,EAAE,OAAO;CACjB,WAAW,EAAE,OAAO;CACpB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,QAAQ;EAAE,MAAM;EAAU,QAAQ;CAAS,CAAC,CAAC,CAAC,SAAS;AACjF,CAAC,CAAC,CAAC,QAAQ,aAAa;AAExB,MAAa,iBAAiB,EAAE,OAAO;CACrC,QAAQ,EAAE,KAAK,cAAc,CAAC,CAAC,SAAS;CACxC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;AAED,eAAsB,gBAAgB,WAAmB,SAA8D;CACrH,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;CAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,WAChC,SAAS,iBAAiB;CAE5B,OAAO;AACT;AAEA,eAAsB,iBAAiB,OAAuB,YAAuE;CACnI,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,MAAM,IAC1C,SAAS,oBAAoB;CAE/B,OAAO;AACT;AAEA,eAAsB,aAAa,SAAgC;CACjE,MAAM,EAAC,OAAM,SAAS;CACtB,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,aAAa,OAAO;CAC7C,MAAM,YAAY,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,YAAY,OAAO;CACjE,MAAM,aAAa,UAAU,MAAM,MAAM,EAAE,WAAW,SAAS,EAAE,WAAW,SAAS;CACrF,IAAI;CACJ,IAAI,YACF,SAAS;MAGT,SADiB,UAAU,MAAM,MAAM,EAAE,WAAW,UACpC,IAAI,aAAa;CAEnC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAClD,IAAI,OAAO;EACT,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS,MAAM;EAClD,MAAM,iBAAiB,IAAI,MAAM,WAAW,SAAS,UAAU;GAC7D;GACA;GACA,eAAe,UAAU;EAC3B,CAAC;CACH;AACF;AAEA,eAAsB,gBAAgB,YAAoB,QAA+B;CACvF,MAAM,EAAC,OAAM,SAAS;CACtB,MAAM,YAAY,IAAI,cAAc,EAAE;CACtC,MAAM,WAAW,MAAM,UAAU,IAAI,UAAU;CAC/C,IAAI,CAAC,UACH,SAAS,oBAAoB;CAE/B,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,SAAS;CACjE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;CAC3D,IAAI,CAAC,WAAW,CAAC,OACf,SAAS,4BAA4B;CAEvC,MAAM,UAAU,OAAO,YAAY,YAAY,MAAM;CAErD,MAAM,IADgB,cAAc,IAAI,SAAS,CAAC,CAAC,OACrC,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,SAAS,SAAS,cAAc,MAAM,WAAW,SAAS,IAAI,SAAS,cAAc;CACjI,MAAM,aAAa,MAAM,EAAE;AAC7B;AAEA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C"}
+{"version":3,"file":"builds.handlers.mjs","names":[],"sources":["../../src/routers/builds.handlers.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { Readable, Transform } from \"node:stream\";\nimport type { ReadableStream as NodeWebStream } from \"node:stream/web\";\nimport type { Logger } from \"pino\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { emitWebhookEvent } from \"../adapters/webhook-events.ts\";\nimport { extractStorybookToScratch, persistStorybookStatics } from \"../capture/statics.ts\";\nimport { BaselineModel } from \"../models/baseline.ts\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { getStore } from \"../store.ts\";\nimport { type ProjectRole, BUILD_STATUSES } from \"../types.ts\";\nimport { notFound } from \"./helpers.ts\";\n\n/** Roles permitted to view builds, snapshots, and comments. */\nexport const VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n/** Roles permitted to upload builds and write comments. */\nexport const DEVELOPER_ROLES: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n/** Roles permitted to approve or reject snapshots and delete builds. */\nexport const APPROVER_ROLES: readonly ProjectRole[] = [\"approver\", \"admin\"];\n\n/** JSON input schema for creating a build before streaming its bundle. */\nexport const buildCreateJsonSchema = z\n  .object({\n    gitSha: z.string().min(1),\n    gitBranch: z.string().min(1),\n    authorEmail: z.string().optional(),\n    authorName: z.string().optional(),\n    message: z.string().optional(),\n    labels: z.array(z.object({ key: z.string().min(1), value: z.string() })).optional(),\n  })\n  .openapi(\"BuildCreate\");\n\n/** Metadata accepted by either build-creation route. */\nexport interface BuildCreateMetadata {\n  gitSha: string;\n  gitBranch: string;\n  authorEmail?: string;\n  authorName?: string;\n  message?: string;\n  labels?: { key: string; value: string }[];\n}\n\n/* oxlint-disable eslint/no-await-in-loop -- label attach is intentionally sequential */\nasync function attachLabels(\n  db: import(\"../adapters/database.ts\").DatabaseAdapter,\n  projectId: string,\n  buildId: string,\n  labels: { key: string; value: string }[],\n): Promise<void> {\n  const models = new LabelModel(db);\n  for (const { key, value } of labels) {\n    const existing = await models.getType(projectId, key);\n    if (!existing) {\n      await models.createType(projectId, { key, name: key });\n    }\n    await models.attach(projectId, buildId, key, value);\n  }\n}\n/* oxlint-enable eslint/no-await-in-loop */\n\n/**\n * Create a build record with labels and the `build:created` webhook.\n * Shared by the build-creation route.\n */\nexport async function createBuildRecord(\n  project: Project,\n  meta: BuildCreateMetadata,\n): Promise<import(\"../schema/build.ts\").Build> {\n  const { db, config } = getStore();\n  if (!meta.gitSha || !meta.gitBranch) {\n    throw new HTTPException(400, { message: \"gitSha and gitBranch are required\" });\n  }\n  const build = await new BuildModel(db).create(project.id, {\n    gitSha: meta.gitSha,\n    gitBranch: meta.gitBranch,\n    isDefault: meta.gitBranch === project.gitDefaultBranch,\n    authorEmail: meta.authorEmail,\n    authorName: meta.authorName,\n    message: meta.message,\n  });\n  if (meta.labels && meta.labels.length > 0) {\n    await attachLabels(db, project.id, build.id, meta.labels);\n  }\n  await emitWebhookEvent(\n    db,\n    project.id,\n    \"build:created\",\n    {\n      buildId: build.id,\n      gitSha: meta.gitSha,\n      gitBranch: meta.gitBranch,\n      authorEmail: meta.authorEmail,\n      authorName: meta.authorName,\n      message: meta.message,\n    },\n    config.secret,\n  );\n  return build;\n}\n\n/**\n * Stream a raw request body into storage with a byte cap.\n * Throws 400 for a missing body, 413 once `maxBytes` is exceeded.\n */\nexport async function storeUploadStream(\n  storage: StorageAdapter,\n  path: string,\n  body: ReadableStream<Uint8Array> | null,\n  maxBytes: number,\n): Promise<void> {\n  if (!body) {\n    throw new HTTPException(400, { message: \"Missing request body\" });\n  }\n  let seen = 0;\n  const limiter = new Transform({\n    transform(\n      chunk: Buffer,\n      _encoding: string,\n      callback: (error?: Error | null, data?: Buffer) => void,\n    ): void {\n      seen += chunk.length;\n      if (seen > maxBytes) {\n        callback(new Error(`Upload exceeds ${maxBytes} byte limit`));\n      } else {\n        callback(null, chunk);\n      }\n    },\n  });\n  try {\n    const nodeBody = Readable.fromWeb(body as unknown as NodeWebStream);\n    await storage.writeStream(path, nodeBody.pipe(limiter));\n  } catch (error) {\n    if (seen > maxBytes) {\n      throw new HTTPException(413, { message: \"Upload exceeds size limit\" });\n    }\n    throw error;\n  }\n}\n\n/** Parse a Content-Length header value into bytes, or undefined when unknown. */\nfunction parseContentLength(value: string | undefined): number | undefined {\n  if (!value) {\n    return undefined;\n  }\n  const parsed = Math.trunc(Number(value));\n  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : undefined;\n}\n\n/**\n * Best-effort inline statics extraction for small uploads (see\n * `maxInlineUnzipSize`). Never throws: failures are logged and the capture\n * job backfills the same keys idempotently.\n */\nexport async function persistInlineStatics(\n  storage: StorageAdapter,\n  scratchDir: string | undefined,\n  maxInlineBytes: number | undefined,\n  contentLength: string | undefined,\n  projectId: string,\n  buildId: string,\n  logger: Logger,\n): Promise<void> {\n  if (!scratchDir || !maxInlineBytes) {\n    return;\n  }\n  const size = parseContentLength(contentLength);\n  if (size === undefined || size > maxInlineBytes) {\n    return;\n  }\n  try {\n    const extractedDir = await extractStorybookToScratch(storage, scratchDir, projectId, buildId);\n    await persistStorybookStatics(storage, extractedDir, projectId, buildId);\n    logger.info({ buildId, size }, \"upload statics persisted inline\");\n  } catch (error) {\n    logger.error({ err: error, buildId }, \"inline statics persist failed; capture will backfill\");\n  }\n}\n/** Query filters accepted by the build list endpoint. */\nexport const buildListQuery = z.object({\n  status: z.enum(BUILD_STATUSES).optional(),\n  branch: z.string().optional(),\n  labelKey: z.string().optional(),\n  labelValue: z.string().optional(),\n});\n\n/** Fetch a build scoped to its project, throwing 404 when it does not belong. */\nexport async function buildForProject(\n  projectId: string,\n  buildId: string,\n): Promise<import(\"../schema/build.ts\").Build> {\n  const build = await new BuildModel(getStore().db).get(buildId);\n  if (!build || build.projectId !== projectId) {\n    notFound(\"Build not found\");\n  }\n  return build;\n}\n\n/** Fetch a snapshot scoped to its build, throwing 404 when it does not belong. */\nexport async function snapshotForBuild(\n  build: { id: string },\n  snapshotId: string,\n): Promise<import(\"../schema/snapshot.ts\").Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== build.id) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n\n/** Recompute a build's counts and roll its status up from its snapshots. */\nexport async function refreshBuild(buildId: string): Promise<void> {\n  const { db, config } = getStore();\n  await new BuildModel(db).updateCounts(buildId);\n  const snapshots = await new SnapshotModel(db).listByBuild(buildId);\n  const unresolved = snapshots.some((s) => s.status === \"new\" || s.status === \"changed\");\n  let status: \"reviewing\" | \"rejected\" | \"approved\";\n  if (unresolved) {\n    status = \"reviewing\";\n  } else {\n    const rejected = snapshots.some((s) => s.status === \"rejected\");\n    status = rejected ? \"rejected\" : \"approved\";\n  }\n  const build = await new BuildModel(db).get(buildId);\n  if (build) {\n    await new BuildModel(db).setStatus(buildId, status);\n    await emitWebhookEvent(\n      db,\n      build.projectId,\n      `build:${status}`,\n      {\n        buildId,\n        status,\n        snapshotCount: snapshots.length,\n      },\n      config.secret,\n    );\n  }\n}\n\n/** Approve a snapshot, promote its screenshot to baseline, and refresh the build. */\nexport async function approveSnapshot(snapshotId: string, userId: string): Promise<void> {\n  const { db, config } = getStore();\n  const snapshots = new SnapshotModel(db);\n  const snapshot = await snapshots.get(snapshotId);\n  if (!snapshot) {\n    notFound(\"Snapshot not found\");\n  }\n  const project = await new ProjectModel(db).get(snapshot.projectId);\n  const build = await new BuildModel(db).get(snapshot.buildId);\n  if (!project || !build) {\n    notFound(\"Project or build not found\");\n  }\n  await snapshots.review(snapshotId, \"approved\", userId);\n  const baselines = new BaselineModel(db, getStore().storage, config.secret);\n  await baselines.upsert(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    snapshot.id,\n    snapshot.screenshotPath,\n  );\n  await refreshBuild(build.id);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmBA,MAAa,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;;AAE7F,MAAa,kBAA0C;CAAC;CAAa;CAAY;AAAO;;AAExF,MAAa,iBAAyC,CAAC,YAAY,OAAO;;AAG1E,MAAa,wBAAwB,EAClC,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQ,EAAE,MAAM,EAAE,OAAO;EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,CAAC,SAAS;AACpF,CAAC,CAAC,CACD,QAAQ,aAAa;AAaxB,eAAe,aACb,IACA,WACA,SACA,QACe;CACf,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,KAAK,MAAM,EAAE,KAAK,WAAW,QAAQ;EAEnC,IAAI,CAAC,MADkB,OAAO,QAAQ,WAAW,GAAG,GAElD,MAAM,OAAO,WAAW,WAAW;GAAE;GAAK,MAAM;EAAI,CAAC;EAEvD,MAAM,OAAO,OAAO,WAAW,SAAS,KAAK,KAAK;CACpD;AACF;;;;;AAOA,eAAsB,kBACpB,SACA,MAC6C;CAC7C,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,WACxB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,oCAAoC,CAAC;CAE/E,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACxD,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,WAAW,KAAK,cAAc,QAAQ;EACtC,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,CAAC;CACD,IAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GACtC,MAAM,aAAa,IAAI,QAAQ,IAAI,MAAM,IAAI,KAAK,MAAM;CAE1D,MAAM,iBACJ,IACA,QAAQ,IACR,iBACA;EACE,SAAS,MAAM;EACf,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,GACA,OAAO,MACT;CACA,OAAO;AACT;;;;;AAMA,eAAsB,kBACpB,SACA,MACA,MACA,UACe;CACf,IAAI,CAAC,MACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,uBAAuB,CAAC;CAElE,IAAI,OAAO;CACX,MAAM,UAAU,IAAI,UAAU,EAC5B,UACE,OACA,WACA,UACM;EACN,QAAQ,MAAM;EACd,IAAI,OAAO,UACT,yBAAS,IAAI,MAAM,kBAAkB,SAAS,YAAY,CAAC;OAE3D,SAAS,MAAM,KAAK;CAExB,EACF,CAAC;CACD,IAAI;EACF,MAAM,WAAW,SAAS,QAAQ,IAAgC;EAClE,MAAM,QAAQ,YAAY,MAAM,SAAS,KAAK,OAAO,CAAC;CACxD,SAAS,OAAO;EACd,IAAI,OAAO,UACT,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,4BAA4B,CAAC;EAEvE,MAAM;CACR;AACF;;AAGA,SAAS,mBAAmB,OAA+C;CACzE,IAAI,CAAC,OACH;CAEF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,CAAC;CACvC,OAAO,OAAO,cAAc,MAAM,KAAK,SAAS,IAAI,SAAS,KAAA;AAC/D;;;;;;AAOA,eAAsB,qBACpB,SACA,YACA,gBACA,eACA,WACA,SACA,QACe;CACf,IAAI,CAAC,cAAc,CAAC,gBAClB;CAEF,MAAM,OAAO,mBAAmB,aAAa;CAC7C,IAAI,SAAS,KAAA,KAAa,OAAO,gBAC/B;CAEF,IAAI;EACF,MAAM,eAAe,MAAM,0BAA0B,SAAS,YAAY,WAAW,OAAO;EAC5F,MAAM,wBAAwB,SAAS,cAAc,WAAW,OAAO;EACvE,OAAO,KAAK;GAAE;GAAS;EAAK,GAAG,iCAAiC;CAClE,SAAS,OAAO;EACd,OAAO,MAAM;GAAE,KAAK;GAAO;EAAQ,GAAG,sDAAsD;CAC9F;AACF;;AAEA,MAAa,iBAAiB,EAAE,OAAO;CACrC,QAAQ,EAAE,KAAK,cAAc,CAAC,CAAC,SAAS;CACxC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,eAAsB,gBACpB,WACA,SAC6C;CAC7C,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;CAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,WAChC,SAAS,iBAAiB;CAE5B,OAAO;AACT;;AAGA,eAAsB,iBACpB,OACA,YACmD;CACnD,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,MAAM,IAC1C,SAAS,oBAAoB;CAE/B,OAAO;AACT;;AAGA,eAAsB,aAAa,SAAgC;CACjE,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,aAAa,OAAO;CAC7C,MAAM,YAAY,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,YAAY,OAAO;CACjE,MAAM,aAAa,UAAU,MAAM,MAAM,EAAE,WAAW,SAAS,EAAE,WAAW,SAAS;CACrF,IAAI;CACJ,IAAI,YACF,SAAS;MAGT,SADiB,UAAU,MAAM,MAAM,EAAE,WAAW,UACpC,IAAI,aAAa;CAEnC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAClD,IAAI,OAAO;EACT,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS,MAAM;EAClD,MAAM,iBACJ,IACA,MAAM,WACN,SAAS,UACT;GACE;GACA;GACA,eAAe,UAAU;EAC3B,GACA,OAAO,MACT;CACF;AACF;;AAGA,eAAsB,gBAAgB,YAAoB,QAA+B;CACvF,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,YAAY,IAAI,cAAc,EAAE;CACtC,MAAM,WAAW,MAAM,UAAU,IAAI,UAAU;CAC/C,IAAI,CAAC,UACH,SAAS,oBAAoB;CAE/B,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,SAAS;CACjE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;CAC3D,IAAI,CAAC,WAAW,CAAC,OACf,SAAS,4BAA4B;CAEvC,MAAM,UAAU,OAAO,YAAY,YAAY,MAAM;CAErD,MAAM,IADgB,cAAc,IAAI,SAAS,CAAC,CAAC,SAAS,OAAO,MACrD,CAAC,CAAC,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,SAAS,IACT,SAAS,cACX;CACA,MAAM,aAAa,MAAM,EAAE;AAC7B"}

package/dist/routers/builds.mjs

@@ -2,14 +2,14 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { BuildModel } from "../models/build.mjs";
+import { storybookZipPath } from "../paths.mjs";
+import "../config.mjs";
 import { getStore } from "../store.mjs";
 import { resolveAuthorizedProject } from "./helpers.mjs";
 import { badRequest, buildSchema, forbidden, notFound, unauthorized } from "./schemas.mjs";
-import { emitWebhookEvent } from "../adapters/webhook-events.mjs";
-import { storybookZipPath } from "../utils/paths.mjs";
-import { APPROVER_ROLES, DEVELOPER_ROLES, VIEW_ROLES, asString, buildForProject, buildListQuery, buildUploadSchema } from "./builds.handlers.mjs";
-import { registerSnapshots } from "./snapshots.mjs";
+import { APPROVER_ROLES, DEVELOPER_ROLES, VIEW_ROLES, buildCreateJsonSchema, buildForProject, buildListQuery, createBuildRecord, persistInlineStatics, storeUploadStream } from "./builds.handlers.mjs";
 import { registerComments } from "./comments.mjs";
+import { registerSnapshots } from "./snapshots.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { HTTPException } from "hono/http-exception";
 //#region src/routers/builds.ts
@@ -29,17 +29,48 @@ const listBuildsRoute = createRoute({
 		...unauthorized
 	}
 });
+const buildCreatedSchema = z.object({
+	build: buildSchema,
+	uploadUrl: z.string()
+}).openapi("BuildCreated");
 const createBuildRoute = createRoute({
 	method: "post",
 	path: "/api/v1/projects/{slug}/builds",
 	request: {
 		params: z.object({ slug: z.string() }),
-		body: { content: { "multipart/form-data": { schema: buildUploadSchema } } }
+		body: { content: { "application/json": { schema: buildCreateJsonSchema } } }
+	},
+	responses: {
+		202: {
+			content: { "application/json": { schema: buildCreatedSchema } },
+			description: "Build created. PUT the Storybook zip to uploadUrl to queue capture."
+		},
+		...badRequest,
+		...forbidden,
+		...notFound
+	}
+});
+const uploadZipRoute = createRoute({
+	method: "put",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/zip",
+	request: {
+		params: z.object({
+			slug: z.string(),
+			buildId: z.string()
+		}),
+		body: { content: { "application/zip": { schema: z.string().openapi({
+			type: "string",
+			format: "binary"
+		}) } } }
 	},
 	responses: {
 		202: {
 			content: { "application/json": { schema: buildSchema } },
-			description: "Build created and capture queued"
+			description: "Zip stored and capture queued"
+		},
+		413: {
+			content: { "application/json": { schema: z.object({ message: z.string() }).openapi("Error") } },
+			description: "Upload exceeds the configured size limit"
 		},
 		...badRequest,
 		...forbidden,
@@ -89,6 +120,7 @@ const deleteBuildRoute = createRoute({
 		...notFound
 	}
 });
+/** Register the build list, upload, fetch, retry, and delete endpoints. */
 function registerBuilds(app) {
 	app.openapi(listBuildsRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...VIEW_ROLES);
@@ -103,36 +135,25 @@ function registerBuilds(app) {
 	});
 	app.openapi(createBuildRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...DEVELOPER_ROLES);
-		const form = await c.req.formData();
-		const gitSha = asString(form.get("gitSha")) ?? "";
-		const gitBranch = asString(form.get("gitBranch")) ?? "";
-		if (!gitSha || !gitBranch) throw new HTTPException(400, { message: "gitSha and gitBranch are required" });
-		const authorEmail = asString(form.get("authorEmail"));
-		const authorName = asString(form.get("authorName"));
-		const message = asString(form.get("message"));
-		const build = await new BuildModel(getStore().db).create(project.id, {
-			gitSha,
-			gitBranch,
-			isDefault: gitBranch === project.gitDefaultBranch,
-			authorEmail,
-			authorName,
-			message
-		});
-		await emitWebhookEvent(getStore().db, project.id, "build:created", {
-			buildId: build.id,
-			gitSha,
-			gitBranch,
-			authorEmail,
-			authorName,
-			message
-		});
-		const zip = form.get("zip");
-		if (zip && typeof zip !== "string") {
-			const buffer = Buffer.from(await zip.arrayBuffer());
-			await getStore().storage.write(storybookZipPath(project.id, build.id), buffer);
-		}
+		const parsed = buildCreateJsonSchema.safeParse(await c.req.json());
+		if (!parsed.success) throw new HTTPException(400, { message: parsed.error.message });
+		const build = await createBuildRecord(project, parsed.data);
+		const uploadUrl = `/api/v1/projects/${project.slug}/builds/${build.id}/zip`;
+		return c.json({
+			build,
+			uploadUrl
+		}, 202);
+	});
+	app.openapi(uploadZipRoute, async (c) => {
+		const { slug, buildId } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const maxBytes = getStore().config.maxUploadBytes ?? 1073741824;
+		await storeUploadStream(getStore().storage, storybookZipPath(project.id, build.id), c.req.raw.body, maxBytes);
 		const reqId = c.get("requestId");
 		await getStore().enqueueCapture?.(build.id, reqId);
+		const { storage, config, logger } = getStore();
+		await persistInlineStatics(storage, config.scratchDir, config.maxInlineUnzipSize, c.req.header("content-length"), project.id, build.id, logger);
 		return c.json(build, 202);
 	});
 	app.openapi(getBuildRoute, async (c) => {

package/dist/routers/builds.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"builds.mjs","names":["notFoundResponse","forbiddenResponse"],"sources":["../../src/routers/builds.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport { BuildModel } from \"../models/build.ts\";\nimport { emitWebhookEvent } from \"../adapters/webhook-events.ts\";\nimport { getStore } from \"../store.ts\";\nimport { storybookZipPath } from \"../utils/paths.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { badRequest, buildSchema, forbidden as forbiddenResponse, notFound as notFoundResponse, unauthorized } from \"./schemas.ts\";\nimport { VIEW_ROLES, DEVELOPER_ROLES, APPROVER_ROLES, buildUploadSchema, buildListQuery, buildForProject, asString } from \"./builds.handlers.ts\";\nimport { registerSnapshots } from \"./snapshots.ts\";\nimport { registerComments } from \"./comments.ts\";\n\nconst listBuildsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: { params: z.object({ slug: z.string() }), query: buildListQuery },\n  responses: {\n    200: { content: { \"application/json\": { schema: buildSchema.array() } }, description: \"List builds for a project\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createBuildRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"multipart/form-data\": { schema: buildUploadSchema } } },\n  },\n  responses: {\n    202: { content: { \"application/json\": { schema: buildSchema } }, description: \"Build created and capture queued\" },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst getBuildRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: buildSchema } }, description: \"Fetch a build\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst retryBuildRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/retry\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    202: { content: { \"application/json\": { schema: buildSchema } }, description: \"Build reset to pending\" },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteBuildRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    204: { description: \"Build deleted\" },\n    ...notFoundResponse,\n  },\n});\n\nexport function registerBuilds(app: ShelfApp): void {\n  app.openapi(listBuildsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const { status, branch, labelKey, labelValue } = c.req.valid(\"query\");\n    const builds = new BuildModel(getStore().db).list(project.id, { status, branch: branch ?? undefined, labelKey: labelKey ?? undefined, labelValue: labelValue ?? undefined });\n    return c.json(await builds);\n  });\n\n  app.openapi(createBuildRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...DEVELOPER_ROLES);\n    const form = await c.req.formData();\n\n    const gitSha = asString(form.get(\"gitSha\")) ?? \"\";\n    const gitBranch = asString(form.get(\"gitBranch\")) ?? \"\";\n    if (!gitSha || !gitBranch) {\n      throw new HTTPException(400, { message: \"gitSha and gitBranch are required\" });\n    }\n    const authorEmail = asString(form.get(\"authorEmail\"));\n    const authorName = asString(form.get(\"authorName\"));\n    const message = asString(form.get(\"message\"));\n\n    const build = await new BuildModel(getStore().db).create(project.id, {\n      gitSha,\n      gitBranch,\n      isDefault: gitBranch === project.gitDefaultBranch,\n      authorEmail,\n      authorName,\n      message,\n    });\n\n    await emitWebhookEvent(getStore().db, project.id, \"build:created\", {\n      buildId: build.id,\n      gitSha,\n      gitBranch,\n      authorEmail,\n      authorName,\n      message,\n    });\n\n    const zip = form.get(\"zip\");\n    if (zip && typeof zip !== \"string\") {\n      const buffer = Buffer.from(await zip.arrayBuffer());\n      await getStore().storage.write(storybookZipPath(project.id, build.id), buffer);\n    }\n\n    const reqId = c.get(\"requestId\");\n    await getStore().enqueueCapture?.(build.id, reqId);\n    return c.json(build, 202);\n  });\n\n  app.openapi(getBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(build);\n  });\n\n  app.openapi(retryBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const updated = await new BuildModel(getStore().db).setStatus(build.id, \"pending\");\n    return c.json(updated, 202);\n  });\n\n  app.openapi(deleteBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await new BuildModel(getStore().db).remove(build.id);\n    return c.body(null, 204);\n  });\n\n  registerSnapshots(app);\n  registerComments(app);\n}"],"mappings":";;;;;;;;;;;;;;;AAcA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS;EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EAAG,OAAO;CAAe;CACzE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,MAAM,EAAE,EAAE;GAAG,aAAa;EAA4B;EAClH,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CAC5E;CACA,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAmC;EACjH,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAgB;EAC9F,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAyB;EACvG,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;AAED,SAAgB,eAAe,KAAqB;CAClD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,EAAE,QAAQ,QAAQ,UAAU,eAAe,EAAE,IAAI,MAAM,OAAO;EACpE,MAAM,SAAS,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI;GAAE;GAAQ,QAAQ,UAAU,KAAA;GAAW,UAAU,YAAY,KAAA;GAAW,YAAY,cAAc,KAAA;EAAU,CAAC;EAC3K,OAAO,EAAE,KAAK,MAAM,MAAM;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,eAAe;EAC/F,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAElC,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC,KAAK;EAC/C,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK;EACrD,IAAI,CAAC,UAAU,CAAC,WACd,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,oCAAoC,CAAC;EAE/E,MAAM,cAAc,SAAS,KAAK,IAAI,aAAa,CAAC;EACpD,MAAM,aAAa,SAAS,KAAK,IAAI,YAAY,CAAC;EAClD,MAAM,UAAU,SAAS,KAAK,IAAI,SAAS,CAAC;EAE5C,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACnE;GACA;GACA,WAAW,cAAc,QAAQ;GACjC;GACA;GACA;EACF,CAAC;EAED,MAAM,iBAAiB,SAAS,CAAC,CAAC,IAAI,QAAQ,IAAI,iBAAiB;GACjE,SAAS,MAAM;GACf;GACA;GACA;GACA;GACA;EACF,CAAC;EAED,MAAM,MAAM,KAAK,IAAI,KAAK;EAC1B,IAAI,OAAO,OAAO,QAAQ,UAAU;GAClC,MAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;GAClD,MAAM,SAAS,CAAC,CAAC,QAAQ,MAAM,iBAAiB,QAAQ,IAAI,MAAM,EAAE,GAAG,MAAM;EAC/E;EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,OAAO,EAAE,KAAK,OAAO,GAAG;CAC1B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,KAAK;CACrB,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,MAAM,IAAI,SAAS;EACjF,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,kBAAkB,GAAG;CACrB,iBAAiB,GAAG;AACtB"}
+{"version":3,"file":"builds.mjs","names":["notFoundResponse","forbiddenResponse"],"sources":["../../src/routers/builds.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { DEFAULT_MAX_UPLOAD_BYTES } from \"../config.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { getStore } from \"../store.ts\";\nimport { storybookZipPath } from \"../utils/paths.ts\";\nimport {\n  VIEW_ROLES,\n  DEVELOPER_ROLES,\n  APPROVER_ROLES,\n  buildCreateJsonSchema,\n  buildListQuery,\n  buildForProject,\n  createBuildRecord,\n  persistInlineStatics,\n  storeUploadStream,\n} from \"./builds.handlers.ts\";\nimport { registerComments } from \"./comments.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport {\n  badRequest,\n  buildSchema,\n  forbidden as forbiddenResponse,\n  notFound as notFoundResponse,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { registerSnapshots } from \"./snapshots.ts\";\n\nconst listBuildsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: { params: z.object({ slug: z.string() }), query: buildListQuery },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: buildSchema.array() } },\n      description: \"List builds for a project\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst buildCreatedSchema = z\n  .object({ build: buildSchema, uploadUrl: z.string() })\n  .openapi(\"BuildCreated\");\n\nconst createBuildRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: {\n      content: {\n        \"application/json\": { schema: buildCreateJsonSchema },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: {\n        \"application/json\": {\n          schema: buildCreatedSchema,\n        },\n      },\n      description: \"Build created. PUT the Storybook zip to uploadUrl to queue capture.\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst uploadZipRoute = createRoute({\n  method: \"put\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/zip\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: {\n      content: {\n        \"application/zip\": {\n          schema: z.string().openapi({ type: \"string\", format: \"binary\" }),\n        },\n      },\n    },\n  },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Zip stored and capture queued\",\n    },\n    413: {\n      content: {\n        \"application/json\": {\n          schema: z.object({ message: z.string() }).openapi(\"Error\"),\n        },\n      },\n      description: \"Upload exceeds the configured size limit\",\n    },\n    ...badRequest,\n    ...forbiddenResponse,\n    ...notFoundResponse,\n  },\n});\n\nconst getBuildRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: buildSchema } }, description: \"Fetch a build\" },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst retryBuildRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/retry\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    202: {\n      content: { \"application/json\": { schema: buildSchema } },\n      description: \"Build reset to pending\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteBuildRoute = createRoute({\n  method: \"delete\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    204: { description: \"Build deleted\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the build list, upload, fetch, retry, and delete endpoints. */\nexport function registerBuilds(app: ShelfApp): void {\n  app.openapi(listBuildsRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...VIEW_ROLES);\n    const { status, branch, labelKey, labelValue } = c.req.valid(\"query\");\n    const builds = new BuildModel(getStore().db).list(project.id, {\n      status,\n      branch: branch ?? undefined,\n      labelKey: labelKey ?? undefined,\n      labelValue: labelValue ?? undefined,\n    });\n    return c.json(await builds);\n  });\n\n  app.openapi(createBuildRoute, async (c) => {\n    const project = await resolveAuthorizedProject(\n      c,\n      c.req.valid(\"param\").slug,\n      ...DEVELOPER_ROLES,\n    );\n    const parsed = buildCreateJsonSchema.safeParse(await c.req.json());\n    if (!parsed.success) {\n      throw new HTTPException(400, { message: parsed.error.message });\n    }\n    const build = await createBuildRecord(project, parsed.data);\n    const uploadUrl = `/api/v1/projects/${project.slug}/builds/${build.id}/zip`;\n    return c.json({ build, uploadUrl }, 202);\n  });\n\n  app.openapi(uploadZipRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const maxBytes = getStore().config.maxUploadBytes ?? DEFAULT_MAX_UPLOAD_BYTES;\n    await storeUploadStream(\n      getStore().storage,\n      storybookZipPath(project.id, build.id),\n      c.req.raw.body,\n      maxBytes,\n    );\n\n    const reqId = c.get(\"requestId\");\n    await getStore().enqueueCapture?.(build.id, reqId);\n    const { storage, config, logger } = getStore();\n    await persistInlineStatics(\n      storage,\n      config.scratchDir,\n      config.maxInlineUnzipSize,\n      c.req.header(\"content-length\"),\n      project.id,\n      build.id,\n      logger,\n    );\n    return c.json(build, 202);\n  });\n\n  app.openapi(getBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(build);\n  });\n\n  app.openapi(retryBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const updated = await new BuildModel(getStore().db).setStatus(build.id, \"pending\");\n    return c.json(updated, 202);\n  });\n\n  app.openapi(deleteBuildRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await new BuildModel(getStore().db).remove(build.id);\n    return c.body(null, 204);\n  });\n\n  registerSnapshots(app);\n  registerComments(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;AA6BA,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS;EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EAAG,OAAO;CAAe;CACzE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,MAAM,EAAE,EAAE;GAC/D,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,EACxB,OAAO;CAAE,OAAO;CAAa,WAAW,EAAE,OAAO;AAAE,CAAC,CAAC,CACrD,QAAQ,cAAc;AAEzB,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EACJ,SAAS,EACP,oBAAoB,EAAE,QAAQ,sBAAsB,EACtD,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,mBACV,EACF;GACA,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EACJ,SAAS,EACP,mBAAmB,EACjB,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ;GAAE,MAAM;GAAU,QAAQ;EAAS,CAAC,EACjE,EACF,EACF;CACF;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EACP,oBAAoB,EAClB,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,EAC3D,EACF;GACA,aAAa;EACf;EACA,GAAG;EACH,GAAGC;EACH,GAAGD;CACL;AACF,CAAC;AAED,MAAM,gBAAgB,YAAY;CAChC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GAAG,aAAa;EAAgB;EAC9F,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAqB;CAClD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU;EAC1F,MAAM,EAAE,QAAQ,QAAQ,UAAU,eAAe,EAAE,IAAI,MAAM,OAAO;EACpE,MAAM,SAAS,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI;GAC5D;GACA,QAAQ,UAAU,KAAA;GAClB,UAAU,YAAY,KAAA;GACtB,YAAY,cAAc,KAAA;EAC5B,CAAC;EACD,OAAO,EAAE,KAAK,MAAM,MAAM;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBACpB,GACA,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MACrB,GAAG,eACL;EACA,MAAM,SAAS,sBAAsB,UAAU,MAAM,EAAE,IAAI,KAAK,CAAC;EACjE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,OAAO,MAAM,QAAQ,CAAC;EAEhE,MAAM,QAAQ,MAAM,kBAAkB,SAAS,OAAO,IAAI;EAC1D,MAAM,YAAY,oBAAoB,QAAQ,KAAK,UAAU,MAAM,GAAG;EACtE,OAAO,EAAE,KAAK;GAAE;GAAO;EAAU,GAAG,GAAG;CACzC,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,SAAS,CAAC,CAAC,OAAO,kBAAA;EACnC,MAAM,kBACJ,SAAS,CAAC,CAAC,SACX,iBAAiB,QAAQ,IAAI,MAAM,EAAE,GACrC,EAAE,IAAI,IAAI,MACV,QACF;EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW;EAC/B,MAAM,SAAS,CAAC,CAAC,iBAAiB,MAAM,IAAI,KAAK;EACjD,MAAM,EAAE,SAAS,QAAQ,WAAW,SAAS;EAC7C,MAAM,qBACJ,SACA,OAAO,YACP,OAAO,oBACP,EAAE,IAAI,OAAO,gBAAgB,GAC7B,QAAQ,IACR,MAAM,IACN,MACF;EACA,OAAO,EAAE,KAAK,OAAO,GAAG;CAC1B,CAAC;CAED,IAAI,QAAQ,eAAe,OAAO,MAAM;EACtC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,KAAK;CACrB,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,MAAM,IAAI,SAAS;EACjF,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;CAED,kBAAkB,GAAG;CACrB,iBAAiB,GAAG;AACtB"}

package/dist/routers/comments.mjs

@@ -58,6 +58,7 @@ const resolveCommentRoute = createRoute({
 		...notFound$1
 	}
 });
+/** Register the build comment list, create, and resolve endpoints. */
 function registerComments(app) {
 	app.openapi(listCommentsRoute, async (c) => {
 		const { slug, buildId } = c.req.valid("param");

package/dist/routers/comments.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"comments.mjs","names":["notFound"],"sources":["../../src/routers/comments.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nimport { CommentModel } from \"../models/comment.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound as throwNotFound } from \"./helpers.ts\";\nimport { commentSchema, commentCreateSchema, notFound, unauthorized } from \"./schemas.ts\";\nimport { VIEW_ROLES, DEVELOPER_ROLES, buildForProject } from \"./builds.handlers.ts\";\n\nconst listCommentsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: commentSchema.array() } }, description: \"List comments on a build\" },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createCommentRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: commentCreateSchema } } },\n  },\n  responses: {\n    201: { content: { \"application/json\": { schema: commentSchema } }, description: \"Comment created\" },\n    ...notFound,\n  },\n});\n\nconst resolveCommentRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments/{commentId}/resolve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), commentId: z.string() }) },\n  responses: {\n    200: { content: { \"application/json\": { schema: commentSchema } }, description: \"Comment resolved\" },\n    ...notFound,\n  },\n});\n\nexport function registerComments(app: ShelfApp): void {\n  app.openapi(listCommentsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(await new CommentModel(getStore().db).listByBuild(build.id));\n  });\n\n  app.openapi(createCommentRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const body = c.req.valid(\"json\");\n    const userId = getStore().user?.id ?? \"anonymous\";\n    const comment = await new CommentModel(getStore().db).create(project.id, build.id, userId, body);\n    return c.json(comment, 201);\n  });\n\n  app.openapi(resolveCommentRoute, async (c) => {\n    const { slug, buildId, commentId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const comment = await new CommentModel(getStore().db).resolve(commentId);\n    if (comment.buildId !== build.id) {\n      throwNotFound(\"Comment not found\");\n    }\n    return c.json(comment);\n  });\n}"],"mappings":";;;;;;;;;;AASA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,MAAM,EAAE,EAAE;GAAG,aAAa;EAA2B;EACnH,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GAAG,aAAa;EAAkB;EAClG,GAAGA;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CAC9F,WAAW;EACT,KAAK;GAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GAAG,aAAa;EAAmB;EACnG,GAAGA;CACL;AACF,CAAC;AAED,SAAgB,iBAAiB,KAAqB;CACpD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC;CAC3E,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI;EAC/F,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,cAAc,EAAE,IAAI,MAAM,OAAO;EACxD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,SAAS;EACvE,IAAI,QAAQ,YAAY,MAAM,IAC5B,SAAc,mBAAmB;EAEnC,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;AACH"}
+{"version":3,"file":"comments.mjs","names":["notFound"],"sources":["../../src/routers/comments.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { CommentModel } from \"../models/comment.ts\";\nimport { getStore } from \"../store.ts\";\nimport { VIEW_ROLES, DEVELOPER_ROLES, buildForProject } from \"./builds.handlers.ts\";\nimport { resolveAuthorizedProject, notFound as throwNotFound } from \"./helpers.ts\";\nimport { commentSchema, commentCreateSchema, notFound, unauthorized } from \"./schemas.ts\";\n\nconst listCommentsRoute = createRoute({\n  method: \"get\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: commentSchema.array() } },\n      description: \"List comments on a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst createCommentRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    body: { content: { \"application/json\": { schema: commentCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: commentSchema } },\n      description: \"Comment created\",\n    },\n    ...notFound,\n  },\n});\n\nconst resolveCommentRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/comments/{commentId}/resolve\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), commentId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: commentSchema } },\n      description: \"Comment resolved\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the build comment list, create, and resolve endpoints. */\nexport function registerComments(app: ShelfApp): void {\n  app.openapi(listCommentsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    return c.json(await new CommentModel(getStore().db).listByBuild(build.id));\n  });\n\n  app.openapi(createCommentRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const body = c.req.valid(\"json\");\n    const userId = getStore().user?.id ?? \"anonymous\";\n    const comment = await new CommentModel(getStore().db).create(\n      project.id,\n      build.id,\n      userId,\n      body,\n    );\n    return c.json(comment, 201);\n  });\n\n  app.openapi(resolveCommentRoute, async (c) => {\n    const { slug, buildId, commentId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...DEVELOPER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const comment = await new CommentModel(getStore().db).resolve(commentId);\n    if (comment.buildId !== build.id) {\n      throwNotFound(\"Comment not found\");\n    }\n    return c.json(comment);\n  });\n}\n"],"mappings":";;;;;;;;;;AAQA,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,MAAM,EAAE,EAAE;GACjE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE,EAAE;CAC3E;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;CAAE,CAAC,EAAE;CAC9F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,cAAc,EAAE;GACzD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,iBAAiB,KAAqB;CACpD,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,OAAO,EAAE,KAAK,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC;CAC3E,CAAC;CAED,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OACpD,QAAQ,IACR,MAAM,IACN,QACA,IACF;EACA,OAAO,EAAE,KAAK,SAAS,GAAG;CAC5B,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,cAAc,EAAE,IAAI,MAAM,OAAO;EACxD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,eAAe;EAC1E,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,SAAS;EACvE,IAAI,QAAQ,YAAY,MAAM,IAC5B,SAAc,mBAAmB;EAEnC,OAAO,EAAE,KAAK,OAAO;CACvB,CAAC;AACH"}

package/dist/routers/health.mjs

@@ -0,0 +1,137 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { requireSiteAdmin } from "./helpers.mjs";
+//#region src/routers/health.ts
+const PROBE_TIMEOUT_MS = 2e3;
+const DETAIL_MAX_LENGTH = 500;
+function pushTarget(targets, adapter) {
+	if (adapter) targets.push(adapter);
+}
+function targetsOf(sources) {
+	const targets = [];
+	pushTarget(targets, sources.database);
+	pushTarget(targets, sources.storage);
+	pushTarget(targets, sources.captureRunner);
+	pushTarget(targets, sources.captureQueue);
+	pushTarget(targets, sources.auth);
+	for (const provider of sources.gitHosts ?? []) pushTarget(targets, provider);
+	return targets;
+}
+function sanitize(detail) {
+	return detail.length > DETAIL_MAX_LENGTH ? detail.slice(0, DETAIL_MAX_LENGTH) : detail;
+}
+function messageOf(reason) {
+	return sanitize(reason instanceof Error ? reason.message : String(reason));
+}
+async function timeoutError() {
+	await new Promise((resolve) => {
+		setTimeout(resolve, PROBE_TIMEOUT_MS);
+	});
+	throw new Error("health probe timed out");
+}
+function okReport(target, latencyMs, detail) {
+	const { category, kind, name } = target.metadata;
+	return {
+		category,
+		kind,
+		name,
+		state: "ok",
+		latencyMs,
+		...detail === void 0 ? {} : { detail }
+	};
+}
+function failedReport(target, latencyMs, detail) {
+	const { category, kind, name } = target.metadata;
+	return {
+		category,
+		kind,
+		name,
+		state: "failed",
+		latencyMs,
+		detail
+	};
+}
+function detailOf(result, fallback) {
+	return result.detail === void 0 ? fallback : sanitize(result.detail);
+}
+async function raceProbe(target, probe, started) {
+	try {
+		const result = await Promise.race([probe(), timeoutError()]);
+		const latencyMs = Date.now() - started;
+		if (!result.ok) return failedReport(target, latencyMs, detailOf(result, "probe reported failure"));
+		return okReport(target, latencyMs, result.detail === void 0 ? void 0 : sanitize(result.detail));
+	} catch (error) {
+		return failedReport(target, Date.now() - started, messageOf(error));
+	}
+}
+async function probeHealth(target) {
+	const probe = target.lifecycle?.health;
+	if (!probe) {
+		const { category, kind, name } = target.metadata;
+		return {
+			category,
+			kind,
+			name,
+			state: "ok"
+		};
+	}
+	return await raceProbe(target, probe, Date.now());
+}
+async function probeTarget(target, initErrors, starting) {
+	const { category, kind, name } = target.metadata;
+	const initError = initErrors.get(`${category}/${kind}`);
+	if (initError !== void 0) return {
+		category,
+		kind,
+		name,
+		state: "failed",
+		detail: sanitize(initError)
+	};
+	if (starting) return {
+		category,
+		kind,
+		name,
+		state: "starting"
+	};
+	return await probeHealth(target);
+}
+function collectInitErrors(settled) {
+	const initErrors = /* @__PURE__ */ new Map();
+	if (settled) for (const failure of settled.failures) initErrors.set(`${failure.category}/${failure.kind}`, failure.error);
+	return initErrors;
+}
+function overallStatus(reports) {
+	if (reports.some((report) => report.state === "failed")) return "degraded";
+	if (reports.some((report) => report.state === "starting")) return "starting";
+	return "ok";
+}
+/** Register `GET /api/v1/health` (open liveness) and `POST` (authed deep readiness). */
+function registerHealth(app, deps) {
+	app.get("/api/v1/health", (c) => {
+		const body = {
+			status: "ok",
+			uptimeSecs: Math.floor((Date.now() - deps.bootTimeMs) / 1e3),
+			version: deps.version
+		};
+		c.header("Cache-Control", "no-store");
+		return c.json(body);
+	});
+	app.post("/api/v1/health", async (c) => {
+		requireSiteAdmin();
+		const settled = deps.getSettled();
+		const initErrors = collectInitErrors(settled);
+		const targets = targetsOf(deps.sources);
+		const reports = await Promise.all(targets.map(async (target) => await probeTarget(target, initErrors, settled === null)));
+		const body = {
+			status: overallStatus(reports),
+			adapters: reports
+		};
+		c.header("Cache-Control", "no-store");
+		return c.json(body, body.status === "ok" ? 200 : 503);
+	});
+}
+//#endregion
+export { registerHealth };
+
+//# sourceMappingURL=health.mjs.map